To start things off for me to take a look at how we can set up a testing environment
for us to be able to try out
all these different techniques that are going to be using Forum. Android
vulnerability testing. This sort of set-up is going to
be something that would be able to be used with any sort of application that
you're trying to test review vulnerability analysis, on most
applications are going to work in emulators, through Android
Studio 2B, don't have an actual Android device. You'll
be able to access it through Android Studio to be able to
do it with emulating it. So you can download. Android Studio
from developer. Android.com Studio, this
URL right here and you're
going to go ahead and download the Android studio version that corresponds to
your operating system version. In this case. I'm using Windows.
Sunset downloaded, you're going to get this application that you'll
be able to run.
And essentially what this box of the installation in this
video and I'll demonstrate how we can set up some emulators that
will be able to utilize throughout these videos. The Android
Studio IDE is also going to come with a lot
of different schools. They're very valuable for us that will
allow us to interact with their emulators and our applications. So
we're going to go to hit next to make
sure both of these are backed up. It will take up a 2.3
gigs of space matter where you
install it to sell it. Wherever you usually, install your stuff
then head on install and it will go
through the installation process.
So what does installation process is complete? You'll have the
Android tool kit that some by ATB in
those three of tools that will be using throughout this end as
well. You have access to write your own code as well as Regulators.
Have you ever wanted to visit at Concepts Android
Studios a good way to do it because you're able tax, you write code
inside of it. In addition to this you have some emulator setup and
you'll be able to access it work with those. So I will
discuss a bit about working with emulators as well to get an idea of
that and I will be assertive in future videos as well.
What does the completed? We can hit next and finish
to launch Android Studio?
So now it will ask you whether you
want to import any settings or not. In this case. I do have
an older install that I can import from, or I could choose to not
import settings for your first time, you put won't have to
import anything at all.
So in this case again, because I had an older installation is
going to ask me about things with system files and I can circulate those
directory, just to clear up some of the deer that's there.
Electric stereo launch Android studio. Now, launching Android
Studio will take a little bit of time. It's, it's a,
it's an application that typically is a little bit
slow. I guess you could say computers. It really depends
on your computer. It might take a little bit of time, taxi boot up to begin with. So
don't be alarmed. If it takes some time to
start up.
See what you get here. A little name. The components will do to the modules and
I want, this is done, will be able to access route for really looking
to get to, which is the emulators. You have
to install Android Studio in order to
get to the Indian leaders, but I think it's good to have the whole thing available. Just that
way, you're able to have all of the
features that come with Android Studio. It's just a lot of help. Inside of
it. So it's either going to be Android Studio page
of yours might not look exactly like mine because mine
has a current like application that's being developed. So
yours might look slightly different. However, you should
have all these two Ubers available to a tomato.
Brothers were interested in. Is this one here, which
is the avd manager if you
don't have access to it through here, I believe,
we're able to get access to it to The View.
I'll just a few different to a windows that are available
inside of here. They just want to make sure that each of your like to
a bar in navigation, bar, in Dayton menu in status bar, all enabled
that you're able to access this.
When you click on this, what it will do is it will load up a page that
will show all over Android virtual devices. Did you see? In this case? I
have not available, which means that I can just create a
new virtual device in this case.
Cease, Rachel devices will have a little bit of customisation. You'll essentially have access
to be able to create things that they make the hardware of
any of the Google devices. Do you see that? There's phones there
TV. There is the tablets, the watch OS
is the automotive or assist as well. So you can emulate
any of those and you can pick really any of these that
you like. Let's just say it all. I'll pick a pixel 3
for this example and you'll see inside, if
you'll be a whole bunch of different operating systems that you can pick and you'll
have to download them the first time that you want to utilize them. You'll
see on here, you can see, like, which virgin it is. So there's like Android 10
Android 9 Android 8.1. So you can really take whatever
Android version do you like Android 9.0
because I have it downloaded and available. I'm
not really too many major operating system
differences when we working with a vulnerability analysis of applications,
but in general, you just hoping to pick operating systems
that are supported still, so, whatever. Supported by
the application, you're looking to pennant pentest, would be what you're picking
out of here. But in this case will just pick nine point.
Open this example.
Is he will be able to give it a name. So I'm
going to call my pixel 3 phone
durability analysis to to
give it like a unique name. So I know what it is the details
about it. Just like the startup orientations and like the
performance pieces. You should just leave these all its default SIM click
finish and now we'll have the device available to us
to see from here. We can just click on the play button
and this watch has launch the device for us to be able to use.
So let's go ahead and try that and let it
run again. It might take a few minutes for it to
launch the emulators as well. Tend to be a little slow
to start up. Once things are started up, then it starts to
run pretty well and you'll be able to up like work with
them relatively flawlessly depending on how fast
your computer is. I think most modern computers would be able to
run to emulators fairly. Well really, really
intensive for the phones, because the
phones themselves. Don't use a huge amount of Hardware comparative to
computers. But yeah.
Your mileage may vary depending on what kind of computer you
accusing. I just bought this is loading Kira. Also know
that you have an Android device. You can utilize it on
for this testing as well. The reason why use emulators myself
just because we're installing purposefully of
vulnerable applications onto these devices. So we don't
really want to do that on a life device. Be mostly want to do that on emulators that
we aren't like impacting the performance of rocks will devices themselves.
But if you do want it utilize it. You can
simply just plug in your USB device and then
you'll have to, I'm an able USB debugging which I'll
talk about it in a future video to be able to actually get onto
the device through a TBH. And then from there you'll be
able to follow along just as if you were using an emulator. So
just keep in mind, you don't necessarily always have to use the emulators. You
can use things such as devices as well. So.
So we can tell that this is working and running
because of the size of the disc is increasing as the
emulator, launches the size on the disc will slightly increased.
I think usually they end up taking a boat like 9 or 10
gigs, Cincinnati to install more stuff to start to take up more
space. So that's just a thing to generally. Keep in mind, you
noticed down here. It also says that it's indexing all
the time for different things to index
to get things set up. So I guess I'll just be patient
with Android Studio. It will eventually start to run
the things that you needed to run. So this it
was cuz you a good idea how we
can install the environments. That would be able to test with. In the
next video will take a look at how we can use ADB 2
on shell into device and will also take
a look at how we can then install the application that we want to
work within these videos. And then from there, we'll divert
it into the van rebuilding analysis and take a look at the different types
of common vulnerability that exists. Take a look at how
to analyze applications and figure out what common
Wonder.
Oldies, we might want to look at. So that's it
will be what we take a look at in the next video for. Now. You could write a
letter setup. You've got your apartment setup. So you should be ready to
Progressive.